General

  • Target

    7d1e70379d60d5e762d22214bdde99b8b5d30c636a2768e31b0e1ce736003ebe.exe

  • Size

    72KB

  • MD5

    620c71b71ae98bb4d2658f6f63ce24f2

  • SHA1

    641917ac420019b5b5199d06da888aa035f06ec2

  • SHA256

    7d1e70379d60d5e762d22214bdde99b8b5d30c636a2768e31b0e1ce736003ebe

  • SHA512

    e41a1fa80a67a7ef2ae8310158d076439bfd36e8586d837b1297f41a3b8ed2732c4029dea5079a93db69fb49b2245c63116b6ab9e2591cc485a9117a4c885c62

  • SSDEEP

    1536:Ixutmeb/qZ9UTcSe723fo8b3Mb+KR0Nc8QsJq3H:IKTTDU2g8b3e0Nc8QsCH

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.1.10:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 7d1e70379d60d5e762d22214bdde99b8b5d30c636a2768e31b0e1ce736003ebe.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections